User Authentication & Authorization in Express

Secure authentication and authorization practices are critical for protecting web applications. This course teaches you how to manage user interactions with your app, data, and other users. With Broken Authentication and Broken Access Control being top security risks, it’s essential to implement the right measures to keep your application safe.

Syllabus

Introduction: User Authentication & Authorization in Express: Get an introduction to what you will learn about implementing user authentication and authorization in an Express application.

Informational: Introduction: User Authentication & Authorization in Express
Article: Web Security: Not An Add-On
Lesson: 2017 OWASP Top 10

Authentication, Authorization, & Encryption: Learn about three key concepts in Web Security: Authentication, Authorization, & Encryption.

Article: Authentication vs Authorization vs Encryption
Article: Evolution of Authentication
Quiz: Authentication, Authorization, and Encryption

Session Authentication in Express: Learn how sessions can be implemented using cookies and localStorage.

Lesson: Sessions & Cookies vs. localStorage
Article: Security-Related HTTP Headers
Lesson: Sessions in Express
Quiz: Sessions
Article: JSON Web Tokens (JWTs)

Password Authentication: Learn about Hashing, Encryption, Encoding, and Obfuscation, how to implement usernames and passwords, and how to encrypt passwords.

Article: Hashing vs. Encryption vs. Encoding vs. Obfuscation
Lesson: Passport.js Local Authentication
Lesson: Bcrypt
Quiz: Password Authentication
Project: Dognation: Password Authentication

OAuth 2.0: Learn how an application can use OAuth 2.0 for authentication and authorization.

Article: OAuth 2.0
Lesson: OAuth 2.0 in Express
Quiz: OAuth 2.0
Article: GitHub OAuth Application

Review: User Authentication & Authorization in Express: Review what you learned about implementing user authentication and authorization in an Express application.